Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.mft
File: 87qQxx60ywFpyUhD5ccv13dQGQY.mft (raw, json)
Hash identifier: 0JZ5XfnYsGzII/BzbT9M1FMSxfM6qIbOGPAqge3ym4E=
Subject key identifier: B7:EF:04:A7:5B:F6:5E:2B:98:6C:2E:E2:CF:CF:22:03:86:89:22:84
Authority key identifier: F3:BA:90:C7:1E:B4:CB:01:69:C9:48:43:E5:C7:2F:D7:77:50:19:06
Certificate issuer: /CN=f3ba90c71eb4cb0169c94843e5c72fd777501906
Certificate serial: 0196BAB62580A1BFDB5B0873E855C35EA1C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87qQxx60ywFpyUhD5ccv13dQGQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.mft
Manifest number: 138A
Signing time: Sat 10 May 2025 15:00:21 +0000
Manifest this update: Sat 10 May 2025 15:00:21 +0000
Manifest next update: Sun 11 May 2025 15:00:21 +0000
Files and hashes: 1: 87qQxx60ywFpyUhD5ccv13dQGQY.crl (hash: Uvmg/YZHe1K1fnfXlM0peioMk0KMWTJYA4/39HbwNDA=)
2: JysSz_R1K3TNaznJ02DbQNBve_s.roa (hash: BaOSaAFh8MSaQI0AxI9H+YSRs1439Nfg5CR//S5kRHM=)
3: cPSt1cBK1yUkGNEnPd-jB0H0f98.roa (hash: 6XTiW18fxhFDL+0aNweHaTDamcOXmMJdNCPIYbjuHV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/87qQxx60ywFpyUhD5ccv13dQGQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:b6:25:80:a1:bf:db:5b:08:73:e8:55:c3:5e:a1:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ba90c71eb4cb0169c94843e5c72fd777501906
Validity
Not Before: May 10 15:00:21 2025 GMT
Not After : May 11 15:00:21 2025 GMT
Subject: CN=b7ef04a75bf65e2b986c2ee2cfcf220386892284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f8:ce:11:72:cd:29:15:b2:63:27:99:34:b4:
0f:36:87:a8:57:ea:14:36:a5:13:89:9e:03:95:8d:
21:cf:33:0b:a4:6f:92:ab:e1:ec:9e:32:02:18:fc:
39:89:42:aa:61:c1:ba:d3:4b:b2:fb:b7:06:12:83:
c3:ac:2b:77:65:42:ad:aa:da:f5:48:47:4a:62:fc:
f3:c3:5b:9a:8c:e0:3a:43:7b:14:ef:db:d6:9c:c6:
1b:a6:52:0e:dd:04:dd:c7:eb:ac:fc:46:78:d1:36:
54:32:a5:e6:86:9b:be:be:bd:06:df:f9:cc:24:d7:
3e:e5:26:2b:2b:c3:68:ee:ff:c6:23:56:4e:49:c4:
7f:c1:1b:30:63:39:e0:c4:3c:e9:5f:47:15:15:4d:
ab:11:36:0c:dc:3f:d2:8e:0b:45:c3:4b:e4:43:0a:
11:ca:55:e5:92:a5:96:fc:8b:0a:a8:ff:a2:9e:f1:
fe:cc:08:12:35:76:8d:55:53:83:0c:76:47:f3:a7:
9e:13:44:e0:02:c9:9e:40:c3:c8:76:0a:89:37:cd:
fb:0d:5d:64:dc:4b:30:13:fd:fb:e7:23:dd:4c:ff:
9f:41:3d:d9:a4:6c:03:3f:5e:8e:a5:82:d3:66:fe:
af:18:99:fa:ad:c6:78:a7:ef:91:89:87:14:22:2c:
1e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:EF:04:A7:5B:F6:5E:2B:98:6C:2E:E2:CF:CF:22:03:86:89:22:84
X509v3 Authority Key Identifier:
keyid:F3:BA:90:C7:1E:B4:CB:01:69:C9:48:43:E5:C7:2F:D7:77:50:19:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87qQxx60ywFpyUhD5ccv13dQGQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:fc:32:3c:bf:24:05:c4:fc:ab:5c:67:a1:90:a8:5d:be:53:
0e:9d:13:20:0a:6b:76:be:3c:04:6a:94:cc:24:d2:90:fa:50:
18:d2:7f:0c:03:71:89:b0:5d:1b:7c:f1:29:e2:bc:ef:87:83:
1a:ed:59:f0:b5:e5:bc:70:5a:0d:b2:47:38:23:e8:49:da:3c:
77:f9:ff:08:4d:bd:33:7c:89:ba:69:0c:62:80:cf:00:64:e3:
02:3a:e0:b6:41:dd:02:f6:88:dc:4f:37:f5:c3:8a:43:f4:66:
48:69:c4:3f:a4:50:b0:40:8c:cc:4e:7c:dc:a4:98:b5:fb:85:
99:cf:5e:1f:62:a5:50:0a:61:4f:a9:8c:e6:db:92:70:38:eb:
79:08:15:6a:fc:98:19:92:5b:73:b8:48:eb:46:98:70:c3:17:
19:24:2d:77:67:90:a1:d8:0a:df:32:13:56:7d:c1:ec:fc:de:
c0:1e:82:91:08:0a:06:8b:e7:6f:3f:4d:1e:3a:f1:b7:09:21:
a3:cb:ed:2d:01:cd:e0:9c:dc:42:de:37:83:6b:22:9a:9a:8e:
ab:2a:d1:c8:8f:f3:2b:fd:cb:fc:e1:8d:f3:81:d4:2e:2d:87:
00:0b:27:1c:26:b2:2b:af:3a:f1:eb:c4:17:4b:e4:ae:8f:1d:
1b:08:66:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:06:25 2025 by rpki-client